← Security+ glossary

Threat hunting

The proactive and manual search for signs of attackers who have already bypassed the defenses, instead of passively waiting for an alarm. The analyst starts from a hypothesis and searches logs and telemetry in order to uncover threats that automated tools did not catch.

All Security+ guides →